[habdelra]

In service of CS-13521, which lets a realm's policy admit callers who aren't signed in. The skills that teach it are released as boxel-skills v0.1.10, together with the other policy-skill work: the anonymous-access section, choosing what to grant, every policy limit, and the search, ignored-path and pointer notes (cardstack/boxel-skills#174, #175, #177, #178, #179, #181). The release also carries the other skill changes merged since v0.1.9, so users get those too: realm.fs listing (#167), the explain example realms (#169), calling public APIs with fetch (#170), theme islands in UI review (#171), the PDF capture filename (#180) and the domain-interview skill (#183).

This moves both plugin marketplaces (.claude-plugin/marketplace.json for Claude Code, .agents/plugins/marketplace.json for Codex) from boxel-skills v0.1.9 to v0.1.10. The v0.1.10 release's Codex manifest declares version 0.1.10, matching its tag as the boxel-cli pin test requires. No boxel-cli release is needed for the skills to reach users.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-07T08:10:40.838342Z	35fe441	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[habdelra]

[Claude Code 🤖] Checked the pin move against the release it points at: both marketplace refs, the tag, the release contents, the title rule, and CI.

No blocking issues. Both boxel-skills refs move together and no other file in the repo carries the old tag; the title is right without a prefix because nothing under packages/boxel-cli/ changes; v0.1.10 is the merge commit of the Codex-manifest PR, and its .codex-plugin/plugin.json declares 0.1.10, which is what the pin test in packages/boxel-cli/tests/scripts/boxel-skills.test.ts asserts. All six policy PRs the description names are in v0.1.9...v0.1.10.

1. Optional, non-blocking: the release also ships skill changes beyond the policy work (the realm.fs read/list skill, calling CORS-open APIs with fetch, the theme-island background in UI review, PDF capture filenames, and the new domain-interview skill). The description is accurate, but one sentence saying the pin delivers these to users as well would let anyone tracking those changes find where they shipped.

CI is still running (Boxel CLI Tests, which runs the pin test, hasn't been queued yet); nothing has failed.

[habdelra]

[Claude Code 🤖] Done: the description now says v0.1.10 also delivers the non-policy skill changes merged since v0.1.9 (#167, #169, #170, #171, #180, #183).